Cross-Site Scripting Vulnerability in Descreekert wx-discuz by Descreekert

CVE-2025-7803

What is CVE-2025-7803?

A cross-site scripting vulnerability exists in the wx-discuz product by Descreekert, specifically within the validToken function in the wx.php file. The issue arises from improper handling of the 'echostr' argument, allowing remote attackers to inject malicious scripts. As the product follows a rolling release strategy for updates, specific version details of which releases are affected or patched are not readily available. This vulnerability poses a significant risk to users, as attackers can exploit it to execute unauthorized scripts in the context of users' browsers.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References